Thanks @furl for looping back with this!  Last week i actually started the move over to IT Essentials Work app after Splunk sunset’d Splunk App for *nix ... View more

@gnangia Please could you try the latest version of the app and let me know if you still have this issue? Thanks ... View more

Sorry, gnangia, I didn't notice your question. What is the exact information that you are looking for? The map search you are using is going to return the individual events, and is quickly going to hit the 50K limit for events to return. If you are looking for a summary report, then you should sum up the results for each application within the search. If you are looking for details, then maybe it would be wise to put a time limit within the search itself (for example earliest=-1d@d latest=-0d@d to get the prior day's results.) ... View more